Corelight

Corelight is a network detection and response (NDR) vendor built around Zeek, the open-source network security monitoring framework whose creators co-founded the company. The platform transforms raw network traffic into structured forensic evidence and layers Suricata intrusion detection, file analysis, and machine-learning detections on top, positioning an open alternative to proprietary NDR appliances. It was founded by Zeek creator Vern Paxson with Robin Sommer, Seth Hall, and Greg Bell, and serves government agencies and large regulated enterprises. Cisco Investments and CrowdStrike are among its strategic investors.